vulnwire
7.5high

CVE-2003-0826in critical feed2 exploits

lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c w…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
12.1%
percentile 96%
Public exploits
2
Exploit-DB

lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could allow remote attackers to execute arbitrary code via a heap-based buffer overflow attack.

Exploit prediction (EPSS)

12.11% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

Exploits and detections

  • EDB-23162 LSH 1.x - Remote Buffer Overflow (2) · remote · 2003-09-19
  • EDB-23161 LSH 1.x - Remote Buffer Overflow (1) · remote · 2003-09-19

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • lists.grok.org.uk /pipermail/full-disclosure/2003-September/010496.html · mailing-list, x_refsource_FULLDISC, x_transferred
  • lists.lysator.liu.se /pipermail/lsh-bugs/2003q3/000120.html · x_refsource_CONFIRM, x_transferred
  • bugs.debian.org /211662 · x_refsource_CONFIRM, x_transferred
  • debian.org /security/2005/dsa-717 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • marc.info /?l=bugtraq&m=106407188509874&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • marc.info /?l=bugtraq&m=106398939512178&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.